Point user management to correct context
Only deny access to Elmah to unauthorised users
Add data anotations to fix JSON serialisation